Information Security Magazine

Cybersecurity researchers issue warning over a surge in attacks designed to trick Facebook users into handing over login credentials

Detected by Check Point researchers, VoidLink is a sophisticated malware framework that can be used to implant malware in the most common cloud environments

Lawmakers want the security industry to help them scrutinize the Cyber Security and Resilience Bill

Silent Push has discovered a new Magecart campaign targeting six major payment network providers that has been running since 2022

Researchers at Palo Alto’s Unit 42 have outlined a list of recommended security controls for vibe coding tools

US agency CISA has retired ten Emergency Directives issued between 2019 and 2024, marking a new step in managing federal cyber-risk

California privacy regulator, the CPPA, is cracking down on data brokers trading personal data without authorization

“Pervasive” threat of phishing, invoice scams and other cyber-enabled fraud is at “record highs”, warns WEF Cybersecurity Outlook 2026

TRM Labs says illegal crypto flows into digital wallets increased to $158bn in 2025

A database featuring 300,000+ users of notorious hacking forum BreachForums has been leaked online

Europol-backed operation targets group behind numerous BEC attacks and romance scams

Researchers at the World Economic Forum have shown that threat actors can use commercial deepfake tools to bypass corporate security protections

Check Point has uncovered a vast, AI-powered scam operation dubbed the “Truman Show”

The FBI says North Korea’s Kimsuky APT group is using QR codes in spear phishing campaigns

The GoBruteforcer botnet has been observed targeting exposed Linux servers on services like FTP and MySQL

Researchers at Radware discovered new prompt injection attacks in ChatGPT agentic features

A long-term cyber-espionage campaign targeting South Asia's telecom firms has been linked to UAT-7290

Misconfigurations abused to make phishing emails look like they come from within the organization

Absolute Security claims that full recovery from endpoint-related downtime can take up to a fortnight for most organizations

The Trump administration decided to leave 66 international organizations, including the GFCE and the European Centre of Excellence for Countering Hybrid Threats